UK & Ireland CISO Executive Summit

Governing Body members host this dinner for attendees to launch the event with an evening of peer networking. Join us at the Hilton Park Lane within the Wellington room, where attendees will enjoy dynamic discussions, fantastic wine and gourmet dishes whilst enjoying fantastic views of Hyde Park.

This is your opportunity to pre-book private face-to-face meetings with executive peers attending the Summit, using a private online portal running up to and during the event. Gain real, practical insights into what other companies and industries are doing, to take back to your boardroom.

Please note: This is for CISO attendees only. 

As the threat of security breaches continue to rise, creating an adequate hybrid SOC is no simple task. It requires the right tools, talent and skills in a single operations environment to stop attacks early. 

Join this session to learn how to:

• Partner with third party providers and balance roles and responsibilities with in-house teams
• Launch end-point detection, SIEM and vulnerability management capabilities
• Define and manage detection and remediation processes across multiple companies

Legacy, perimeter-centric security models have proven ineffective. They simply aren’t capable of safeguarding today’s mobile, agile, and hyperconnected workforce and business strategies. 

So how can executives maintain the integrity and defence of enterprise data, applications, users, and devices in today’s intensifying threat landscape? A zero-trust security model is necessary. Meeus will cover:

• Why and how leadership teams must embrace a “verify but never trust” principle to preserve the health of their networks
• By adopting a zero-trust security model, organisations can evolve, responding to both threats and business processes alike, with confidence and agility 

According to SANS Institute, only 47% of initial vectors of cyber-attacks are detected by antivirus tools. Security teams must assemble multiple security products to combat the gap in their security posture within the ‘new security perimeter’. Should there be a breach, teams often have limited capabilities to respond restricting overall organisational resilience to such an attack.

Join this session to discuss:

• What is security resilience?
• Is resilience a better measure for security posture when breaches are inevitable?
• How to overcome performance and productivity limitations during an attack

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact Luis Arango.

Talent needs are like security threats—plentiful, complex and ever evolving. This can make it tough to predict talent demands and know when (and how) to reskill existing talent. Bring your greatest talent challenges to discuss with your peers in this roundtable discussion on ways to: 

• Identify and plan for future hiring needs
• Reskill talent to evolve with the security landscape
• Hire the right people

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact Luis Arango.

The rush to innovate has resulted in more sophisticated threat defences, but it has also created a complex web of tools that must be managed by an already overworked and understaffed security team. Heterogeneity of defence systems is itself a defence, so modern security teams need to approach consolidation differently. 

In this session, attendees will learn how:

• Data-first approaches to security architectures illuminates natural consolidation points
• Cross-collaboration within the IT organisation improves security posture and reduce tool sprawl
• Leveraging other parts of the organisation improves security posture through smarter processes and practices

Most CISOs feel comfortable managing the minor security incidents with standardised processes, but what about major incidents that shake the very foundations of your organisation like the NotPETYA attack? Such crises can be career changing. 

Join this workshop to:

• Learn the basic building blocks of effective cybersecurity crisis response
• Share challenges and best practices in managing major security events
• Benchmark against your peers and identify lessons learned

Attendees must register for this session. Seating is limited to 50 people and priority is given to C-level attendees. 

Attackers know it’s much easier to find someone who will click than to find a working exploit for a modern OS or browser. However, most organisations have very little idea which of their people receive sophisticated threats, targeted threats, or large volumes of threats. We call these targets VAPs (Very Attacked People).

This session will focus on:

• How to identify who the Very Attacked People are within your organisation (probably not your VIPs)
• Why and how VAPs are targeted
• Meaningful steps a security leader can take to protect their VAPs

Information security leaders navigate an increasingly complex matrix of national and foreign data privacy regulations. GDPR caused organisations to scramble to meet data protection directives and reassess risk management through new compliance reporting requirements and potential exposure to financial penalties. Now California has its own Privacy Act set to come into effect, and it’s one of potentially many different pieces of forthcoming regulation and policy. How can organisations create a unified data protection and compliance strategy that meets conflicting requirements?

In this session, discuss:

• The current landscape of data privacy regulation around the world
• Best practices for managing risk associated with data protection frameworks
• Standards and metrics for measuring data protection risk
• Data classification strategies to aid compliance, regardless of regulation

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact Luis Arango.

The role of the CISO has changed dramatically over the past decade from an IT-focused role to more business oriented. What will the role look like a decade from now? What are the qualities that are key for the next-generation security leader? This interactive session gives you the chance to discuss:

• What the future holds for CISOs in an evolving threat landscape
• How to effectively partner with the business
• What comes after being a CISO

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact Luis Arango.

You are only as strong as your weakest link. To ensure your organisation has the strongest defence against cyber crime and protects customer data, information security needs to be part of every employee's life. 

In this session, you'll hear about: 

• How to establish the principle of business accountability for information security 
• Golden rules of emotionally engaging security training and measuring effectiveness 
• Benefits of gamification that encourage secure behaviours

Matthew Rowe, CISO, Nationwide Building Society and David Calder, CEO, Adarma presenting a partnership approach to Security Operations Centre effectiveness.

This session will include:

• Things to consider when investing in new security controls
• Nationwide end user case study - the journey to building an effective Security Operations Centre
• Future plans and working towards maximising SOC effectiveness

Whether it’s cybercriminals motivated by profit or nation-state attackers with geopolitical motives, public and private organizations of all sizes have felt the impact of cyberattacks. Enterprise organizations are reeling from the onslaught of massively spread ransomware attacks to surgical pinpointed attacks on their assets from sophisticated state-sponsored actors. How can CISOs best face changing threat vectors?

Join this roundtable conversation to discuss:

• The current threat landscape
• How to best discover and thwart nation-state attacks
•  What security executives can do to build resiliency

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact Luis Arango.

Whilst most organisations today successfully communicate their security plans, policies and procedures, many are not having ongoing, active discussions about information security with their entire workforce to develop a culture of security. It’s vital the business moves away from seeing security as the ‘people who say no’ and towards how security teams can help solve complex business problems.

In this TED-style talk Carstensen will share CRH’s journey to creating a secure culture for its global workforce, including how to:

• Ingrain security into your organisation’s DNA to drastically improved security practices
• Develop an effective security agenda adaptable for different countries, cultures and languages
• Get buy-in from the board to drive the security culture from the top down